Releasing Packages with a Valet Key: NPM, PyPI, and Beyond (byk.im)

1 points by BYK 9mo ago ↗ HN

1 comment

[ 5.1 ms ] story [ 55.5 ms ] thread

BYK 9mo ago ↗

How we built a secure, auditable, and low-friction release system at Sentry that is resistant to supply-chain attacks like Shai-Hulud